CVE-2023-28124

MEDIUM

UI Desktop < 0.62.3.0 - Weak Encryption

Title source: rule

Description

Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later.

References (1)

[Vendor Advisory] https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4

Scores

CVSS v3 5.5

EPSS 0.0004

EPSS Percentile 10.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-326

Status published

Products (1)

ui/desktop < 0.62.3.0

Published Apr 19, 2023

Tracked Since Feb 18, 2026